New Vulnerabilities in React Server Components Allow DoS Attacks and Source Code Leaks

Cybersecuritynews •Guru Baran • December 12, 2025

Less than a week after addressing a critical Remote Code Execution (RCE) vulnerability, the React team has disclosed three additional security flaws affecting React Server Components (RSC). Security researchers discovered these new issues while attempting to bypass the mitigations for the “React2Shell” exploit. While the original RCE patch remains effective, the newly discovered vulnerabilities […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Severe Vulnerabilities in React Server Components Enable DoS and Code Exposure The React team disclosed three new vulnerabilities in React Server Components, allowing for Denial of Service (DoS) attacks and potential source code leaks. These flaws were identified by security researchers while testing mitigations for a previously reported Remote Code Execution (RCE) vulnerability. The original RCE patch remains effective, but the newly found issues pose significant risks to applications using React Server Components. 5 sources 59

Extracted Entities

New Vulnerabilities in React Server Components Allow DoS Attacks and Source Code Leaks

The full story

Extracted Entities

Attack Types (2)

Malware (1)

Platforms (1)